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(54) APPARATUS AND METHOD FOR MODULO EXPONENTIATION CALCULATION, AND 
PROGRAM 

(5 7) Abstract: 

PROBLEM TO BE SOLVED: To provide a modulo 
exponentiation calculation apparatus which realizes 
prevention of secret key leakage due to power analysis 
attack to a public key ciphering system. 
SOLUTION: A divided key generation part 120 
generates k-number of divided secret keys from the 
secret key (d) of the public key ciphering system and 
generates x-number of dummy keys by a random 
number and a key index consisting of k-number of 1 
and x-number of 0. An RSA signature device 1 30 writes 
a plaintext M as an initial value in data storage part (0), 
(1), performs modulo exponentiation calculation by 
using corresponding single divided secret key with the 
value of the data storage part (1) as an input when the 
key index is 1, stores the result in the data storage part 
(1), performs modulo exponentiation calculation by 
using corresponding single dummy key with the value 
of the data storage part (0) as an input when the key 
index is 0, and stores the result in the data storage part 
(0). The value of the data storage part (1) after 

processing is a signature sentence. Even if the divided secret keys are leaked due to power 
analysis attack, it is difficult to obtain the secret key (d). 
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<Dm®mtn&% 2 ©nsma^tSE 3? 5 -« to ^me * sis 12^ **«i*®*ff ? * 

*X**fcttoT, fl3t3*g8t©S& l ©IBf&a&tf &<i!e$&©S& 2 QfBftfttttflcttGtKft 
[ 0 0 2 8 ] 

3%fi:LTt))£jl[t5c 20 

o 

[ 0 0 2 9 ] 

froTLHoTt, * n6*6»*«**»* C * & E £ £ *Uf > tfi? 30 

IT, inm, «ffi> iffiSl < «£S:fctt*fte>*i£&£fc-&;fct>©i:(,^ * o t, 

[ 0 0 3 0 ] 

[ 0 0 3 1 ] 

UTftt, £M*BBg<§#:i£©3 -*3 R S A*#0»-&*Wh:fcoTttlia-r*. HTT 

*B?BSt*JH^fc^£3IISiiJ&ff-S?i: LT R S AHg^©Jg££j£©i§3-*0!|k:i:oT&ii(! 40 

[ 0 0 3 2 ] 

(SB l cDSSfiSJ&ffiD 

£1*, 1 © ^ fifi ?t? ffil i: l/T, *SASfl3fc£g*teE L (^i§£ ©IfcS&IJffiH;: o 

[ 0 0 3 3 ] 

[ 0 0 3 4 ] 50 
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m i testis <k b ic *«9»a*> ^riii« fl-MUffa i i o , #sya£/£gfa 1 

20, R S AmZm® 1 3 0 £fl§ *T^S„ ftSia^fiScSSEi 1 2 0 14, RSA®IStt®l 

2 i , asanas 1 22, #8>ia£#si5 1 23*^*, r s as^sss 1 3 0 a, 
fetass 1 3 1 , ^sstij&ff-ffg&i 32, ©-r-*i2ia8& («t, •r-^ietass (0 

)tfE*ET3) 133,$ 2 <Dif-*i2t§S|S («T, r-2 SBtSSB ( 1 ) 5) l 

3 4, aa *J SB 1 3 5 *^tr 0 
[ 0 0 3 5 ] 

tt8&a£fT« 1 1 0 li, RSA<D&l»S!(e, n) fcttffia (d, p, q) *£j£L, C 
tl5«»9l8S(SglSl 2 0rt©RSAil2Sa!l 2 1 K^^tS, ftfe'L, p, q 14 * 
tl^n** fciSta-p, n = p*q, ed = =l (mod lcm(p-l) (q-1 10 

) ) &mft?« 

[ 0 0 3 6 ] 

#ftft£j££IB 1 2 0 14, #ftfBfttt«*£tfbT R SAS*8®1 3 0t«ISL, RS 
A?g«ffiia 1 3 0 14, «»*ftfc»KB««$*ffl^T V*MIC»**»**M " d m 
od n^^ftSt©?*?. 
[ 0 0 3 7 ] 

S-T. #$ija£j#2£H 1 ZOEO^TK(!t5. 
[ 0 0 3 8 ] 

R S A ft GIB tt 1 2 114, ttaSftHfrft 1 10fr&{tmSft3RSA<D£Bfla (e, n) 

tmmm (d. P , q) ^stjsur 1 2 3 ic£i»a ( e , n) 20 

ttttiSSt ( d . p , q ) «KI&tS. 
[ 0 0 3 9 ] 

1 2 2 a, ftswe-y km© afc*tfe>vb*ij ttaaic<fcs£tf 
t, *n6*#»ja£isasi 2 31c 

[ 0 0 4 0 ] 

ftaua^jaas 1 2 3 14, asepsis 1 2 2 ^ 5. «*S2ft*#9JMac> r s 

ABEIS* 1 2 lfr5>&*&Sn£fB£a (d, p, q) , &M®. (e. n) t*ffl^T« 
[ 0 0 4 1 ] 

jut, * HA»jft«a*«fflt»^»^©»««*«*j«*wfco^Tiiwr5. 30 

[ 0 0 4 2 ] 
[ 0 0 4 3 ] 

CCT14, ftMMa£$©-0iJfc LT, 85fcadfc, St & © * Jc «fc t> , k <BMu # $J * * 

t<otta. tfcfc*, 

d = d [0] * d [1] * - * d [k-1] mod (I cm (p-1, q-1)) 
£: & S <fc 3 tc , d£d [0] . -, d [k-1] IctffpJfS t©i:t«, 
[ 0 0 4 4 ] 

$-r, aasfiKgBi22i4, s t: -y h<z>aa% k u, ^eti^en, ##ji&ffiad [1 

] ~d [k-1] 'NftAtS (Xf 1) o fc*5, st4, Mad © If -y h g «fe D /J% 40 

*i>tr-y us (»mad tfeiutfs 12^ bfe5iu4 1 0 2 4 tr-y hggeuf #ic#8y 
«5sad en ~d [k-n tfznznmx.issvv hsao icts t*?* l<^ 0 

[ 0 0 4 5 ] 

assE^fiRSPi2 2i±, s if7 hcoaa^xiBtSL. ^-n^ti, [0 

] ~du [ x - 1 ] ^ftA-TS (Xf«;y$2) . 
[ 0 0 4 6 ] 

aa*B!cSUl 2 2 14, k + x- I £«y hS7flon;>^l*^k - 1 ttsa^ 
>f'?ni [i] (UiSk + x-1) «?yifAli:S«t5 (Xf^S3) , 
[ 0 0 4 7 ] 

^^T,^»ja*fiKS15l23t4, t [i]=lfcfc*a(0*D,#8imffiad [J] ( 50 
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1 £ j £ k - 1 ) ) *mif&t>l£T. 
D 0 =d [1] *d [2] * - * d [k-1] 
tb. R S A&fBftaS 1 2 1 P.{K*&£ft3 8S!B©d *ffl^T, 
d[0]=d*D 0 "-l mod (I cm (p - 1, q-1) ) 
t-rSCfcT, SO 1 O<0#*Jfgffigt d [0] (Xf^S4) . 

$ , t [0] = !tt5 (Xf^SO , 
[ 0 0 4 8 ] 
» 

^S>J«fB!8 d[j] (OSjSk-l) . 
#5 -@ d u [ u ] ( 0 £ u £ x - 1 ) , 
l^Vfyni [i] (0£i£k + x-l) 

[ 0 0 4 9 ] 

f lt, tfsuaai/ffsis 1 23a, 

d [ J ] ( 0 £ j £ k - 1 ) . 
du[u] ( 0 £ u £ x - 1 ) , 
t [i] (0£i£k + x- l), 
£Mft ( e . n ) , 

mmm (a . P , q) 

^RSAg^Sil 3C\tiJ^-rS ( * t -y 7 S 5) o 
[ 0 0 5 0 ] 

ftfe, B 2 (D^MUlls^Tli. d [1] , d [2] . •• . d [k-l] *£?£$Lfc& 

icd to] ;frjRa&5i&g#&3;y, ?n«wii, km<Dft®m®mz xm<o?s.-mi:m 

-< V V 7,*)t<T>&*> *M#-e*i6T &#Jfcfcl^o 
[ 0 0 5 1 ] 

r s a^^ses i 3 o \c-o^xmmt S 0 

[ 0 0 5 2 ] 

#»BIBtt8 13 1^ #£JS!£filtl$i! 1 2 0 rt<D#3"J®2£$g|S 1 23fr5«f&£n*# 

mwrnm. i^>f ^uaa ( e . n ) , &mm (a, P . q ) 

[ 0 0 5 3 ] 

•r-*!Ste8IS(0) 1 3 3 ictt, ^5-8t«r^rat«:^*SI»J^|f-@(DH-®^*(-rftto 
•£* , S-<Z>&f8*SSI) S * #«$Stu r-*£te8B ( 1 ) 1 3 4 lc«, #S)J#«»*ffi 

[ 0 0 5 4 ] 

^#*9J^tt»SUl3 2«, 7*-*32t8SI5 ( 1 ) 134^6|tjIsIST(J!)^J?^«S (fcfc* 
IJI 0 H #J )$ fifi S = Mi;45) *P?tftBLT. ^SiJfflEiftSiSl 3 1 5 {K & * ft 5 Si W 
>f'^Xit [ i ] *>M ftfetf » tfMIBtSSd [j]*fig^>TS = S~d[j] mo 
d n ©ttJ?&fr *<0*5* S *T-*fB®SB ( 1 ) 1 3 4 icteffl L , l&fi . «l' V r 
•y *Xfi8 t [I] 0 £5>f£, ^5-Sldu [ u ] %ffi^TS' = S"du [u] mo 
d n U * <D*5£ S ' *r-*ie®8li (0) I33t««t*. 46, I-f> 

■T-y^Xfiflt [l] =0<Olf^fc, S'=S"du[u] mod nJ2ttt<DH-J?*fr3 

[ 0 0 5 5 ] 
[ 0 0 5 6 ] 
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ffl^SM 3 5 It > x-^f2tgg» (1) 1 3 4 S ( = M ~ d modni45) 

[ 0 0 5 7 ] 

[ 0 0 5 8 ] 
[ 0 0 5 9 ] 

ftfe, cc-eti, ##m?B®d [J] it, JO{l©'hSl^^ei^®fflL> ^ 5 -Si d 
u [u] it, u®m<»'b2^l3fr < i&9l&RlT%t<D£L1iM**LX^Zo 10 
[ 0 0 6 0 ] 

Sit, r-*£tg8B (0) 13 3 *><}: tf T-*!Btl3P ( l ) 13 4 K ^ti^tiWWfii 
LT¥XM%S*ii», i = 0 , J = 0 , u = 0i:t3 (Xfy/S 1 1) 0 *5 

, T-*fatg8B (o) i 3 3(cot>t(i, ¥-HMMn<Dmtfimmmzi2;-or *>mt>&^* 

[ 0 0 6 1 ] 

M&it, k + x HJco^OigLJiaataSc 
[ 0 0 6 2 ] 

**\ <tSt«iJ&itM 1 3 2 li, i-f>f-^Xlt [ 1 ] *#JHL, t [ i ] = 1 & 
Sfcf (Xf^S 1 2) , T-^f2tagi5 (1) 1 34*»6S*K*fflb, #fJ$ffiitd [ 
j] %«ot, S = S*d [J] mod n <Z>ff® £ ?? > * <9 S *7*-*!B<aa5 20 

(i) i34iciSiML(X7 i ^ysi3), ]fe<t:tfi«*n?nifo^y^^vF 

t5 (Xf 14, S 1 7) . 

[ 0 0 6 3 ] 

m*, a-r * xffi t [ i ] # o * etf (xt^s 1 2 ) „ r-^IBiasu (1)1 

3 4A^SSI»aiL, ^5-Sldu [u] S«ot> S' = S"du [u] modn 

<DMnzfi^. *<Dm%s' *-r- states* (0) 1 3 3 ic l txf^s 1 5) , 

ufeiffl*^nHllf0^y^iJ^>Ft5 (Xf -^S 1 6, S 1 7) . 
[ 0 0 6 4 ] 

fit«r#B8L, i ©{itf#fJ8S?BSii: ^5-®©I^SSc k + x * iS * T ^ 6 (X-f y 7 30 
S 1 8) , Xf'^S 1 2 tc B€ t> . ^©;l/-y<D«lS%tf 5 . 
[ 0 0 6 5 ] 

S&ftlc, Xf?/S 1 Slcfe^T, i> (k + x) fcfcofcfcStf* JS£ & 7 f 5 o 
C©£ t fcr-^fEttSP (1) 1 3 4 ICfeiMSnT^a S tf, *feSi«Atftfc^M* 
d mod n 
[ 0 0 6 6 ] 

[ 0 0 6 7 ] 40 

C ZV . M:#WVttiW$- Z t, mz.lf, k = 8 , xM^-fyf^X'MOHO 
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(90@) S' = S*du [2] mod n 

( I OBI) S = S " d [ 6 ] mod n 

(111!) S' = S"du [3] mod n 

(I 2BI) S = S " d [ 7 ] mod n 

m&toicmztirc s 

= (((((((M"d[o: mod n ) ~ d [ 1 ] mod n ) " d [ 2 ] m 
od n ) ~ d [ 3 ] mod n ) " d [ 4 ] m o d n ) ~ d [ 5 ] mod n) 
* d [ 6 ] mod n ) " d [ 7 ] mod n 

= M ~ d [0] * d [1] "d [2] "d [3] * d [4] * d [5] "d [6] *d C 10 
7 ] mod n 

= M " (d [0] * d [1] *d [2] *d [3] * d [4] * d [5] *d [6] * d 
[ 7 ] ) mod n 
=M"d mod n 

[ 0 0 6 8 ] 

[ 0 0 6 9 ] 
[ 0 0 7 0 ] 

±t2T'tt, tfiJ&ffiitd [j] tt, j <OM<0>bZ ^fifr t>myt.mm U ?5-Sdu [u 

[ 0 0 7 1 ] 30 

Sfc, iBttt, ^ »J «5 ffi ® d [j] <0®ffili#fc<i:tf2'$-ffldu [u] V&mMftli. 

tt^siaicLTtj;^, gij^ff, mm. tL&icm^^r ±m<o&mMftz&M-r 5 * 

c*. c <o A a icmo&mmft*? y?L\c? s e: \c £ -p t, * Slc-tr+i u ty&&* 
[ 0 0 7 2 ] 

Jiiafti, d <D#MJj&£ LT, tteC^iDfcO^ffifflLfttf, 40 

?£* 0J*.lf, inffi (0*<D^3W^rS (0J*lf> d = d [0] + d [1] + d [2] + d [3 
] + ••) , Mi£<D#<0#SiJ2fi£ (M*.l£. d = d [o] -d [1] -d [2] -d [3] 
-•••) . BtSi£<A*<D#|ij73 8; (0ij*tf, d = d [0] /d [1] /d [2] /d [3] / 

•••) tsrfliTfeo, iraj* • & • mm • B*is©®M$fcii^-i±fc5rfleT?<&5 (MAt* 

, d = d [0] * d [1] + d [2] *d [3] + - ) o 
[ 0 0 7 3 ] 

ffifflcD^|iJ^}£ liH^T 5) J: ? lc IT t> «fc ^ L, £ ft , tfjxfcf, R-<DSH (i&S^tt 

a--»f) ico^rt, m^©* = wt mm) , Si<D»liiJ?5r fcfcg** <k 3 50 
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a 'J 7- <{ % fi* ± if S C i: # 7? $ 5 . 
[ 0 0 7 4 ] 

, #3«;frS;gf*£&£5 *><0U:g*5©-C«fc < , {flfctf, J#B<D#9J8td [j] \c # 

mmm d ©#fij« k *5j£fc-r-5J§-&# *o cne><D<i:$ kts <: tic*oT» 2 10 

[ 0 0 7 5 ] 
[ 0 0 7 6 ] 

SgffiSd fctaffilcj: t» k #8Jf -5 #8"Jfatt#<0 J; ? lefcs. 
d = d[0]+d[l]+-+d[k-l] mod (I cm (p-1, q-1) ) 
D 0 =d [1] + d [2] + • • + d [k-1] 
d[0]=d-D 0 mod (lcm (p-1, q-1)) 

d c i ] . d [ 2 ] - d c k - i ] «, mmicm-r zm&m tman, su^Koa 20 

[ 0 0 7 7 ] 

1 3 © S = S ~ d [ i ] mod n £ , S = S*M~d[l] mod nktnifJ: 
l\ ft*, Xf '?ys 1 5ICO^Ttt, S = S*M"d[i] mod n\ctt!&Z*£T 
> S'=S*M"du[u] mod nittllf J;^, 

[ 0 0 7 8 ] 

zee, mttm-emw? z mtus, k = 8, x = 4 , ssy>t«v^x = "1 0 1 1 0 



I 1 10101" win, 
(1HI) S = 1 *M" d [0] mod n 30 
(2@g) S * = S * M * d u [0] mod n 
(3@S)S = S * M " d [ 1 ] mod n 
(4®@)S = S * M ~ d [ 2 ] mod n 
(5IU@) S ' = S*M"du [1] mod n 
(6B1) S = S * M " d [ 3 ] mod n 
( 7 ® g) S = S * M * d [ 4 ] mod n 
(8®g) S =S*M~d [5] mod n 
( 9 Is] g ) S ' = S*M"du [2] mod n 
(I OBI) S = S * M ~ d [6] mod n 

(I Igg) S' = S*M'du [3] mod 11 40 
(1 201) S = S * M " d [ 7 ] mod n 
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= («((((1*M~ d[0] mod n)*M"d[l] nod n)*M * d[2] tod n) 
*M~ d[3] tod n)*M~ d[4] nod n)*M* d[S] nod E)*M*d[6] tod a) 
*M~ d[7] tod n 

= M ^ d [03 ♦M 4 d [1] *!T d [2] *M* d C3] *lT d [4] *tf d [5] *M* d [6] *M* d [7] tod o 



(d[0]+dD]+d[2]+d[3]+d[4]+d[5]+d[6]+d[7]) mod n io 
=M"d mod n 

[ 0 0 7 9 ] 

m m ic m ? s m /« m * m m -r * as # ic -o » x w w -r s . 

[ 0 0 8 0 ] 

*-r> mmmd zmn&xftsa&ic * k> k ftpitfr-mzxicni? (fcfc* t k 

/ 2 - 1 ] i: d [k/2]<DM(Dioco*i:1-S) 0 

d = d [0] *-*d [k/2-1] + d [k/2] *-*d [k-1] mod (1 20 

cm(p-l. q-1)) 

D 0 =d [1] * - * d [k/2-1 ] 

D, = d [k/2] * •• * d [k-1] 

d [0] = (d-D, ) *D 0 " - 1 mod (lcm(p-l.q-l)) 

d [i] . d [2] -d [k-n it, mmicmtzm&mtm®. strvhoa 

[ 0 0 8 1 ] 

S 1 IT'S lfe<fctfS2©a»|ffi**tl*nMi:U Xr;7S 1 3%, J = 0 ~ k / 2 
- 1 Jco^T, S l = S I * d [i] mod n, j = k / 2 ~ k - 2 tO^T, S 2 30 
= S 2 " d [ l ] mod n> J = k - 1 ICO^T, S 2 = S 2 ' d [ 1] modn 
*fTofc&£, S = S 1 * S 2 modnttnif*li'. fcfc, Xf^S 1 5 IC O T 
It. 00 A If , S ' = S1 ~ d u [u] mod n S tt S ' = S2 ' du [u] mo 
d n ittltf il,a, 0U*lf , u ©Ifc^Ct , S ' = S 1 "du [u] mod 

ni:S' =S2*du [u] mod n <D f fx ? *»* ilS?f £ «fe 9 fc L T & J: 

[ 0 0 8 2 ] 

CCT, llttWTtfilEf 5 t , Mxif, k = 8 , x = 4 , ft<f>7*9*X- "1 0 1 1 0 

11 loioi" 0>v-fr„ 

(l@B)Sl=M"d[0]modn 40 

(2BB) S' = S1 "du [0] mod n 

(3BI) S I »S 1 " d [1] mod n 

(4BI) S 1 = S 1 * d [2] mod n 

(5BI) S' = S1 "du [1] mod n 

(6gl) S I = S I ' d [3] mod n 

(7Hg)S2=M*d[4] mod n 

(8BI) S2 = S2 " d [5] mod n 

(9@@) S' = S2'du [2] mod n 

(1001) S2 = S2"d [6] mod n 

(I 1 iB) S' = S 2 " d u [3] modn 50 
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(12HJ@)S2 = S2"d[7] mod n 

-S1*S2 mod n 

= ((((M " d [0] nod n) " d [1] nod n) ~ d [2] nod a) ~ d [3] mod b) * 
((((M ' d[4] nod a) " d[5] nod n) " d[6] nod a) " d[7] nod a) mo d 
n 

-M'dtOl'dWdra'dCaKlfdM'dKl'dKl'dm mod n 10 
=M~ (d[0]*d[l]*d[2]*d[3]+d[4]*d[5]*d[6]#d[7]) mod n 
=M~ d mod n 

[ 0 0 8 3 ] 

i&<Dftmx&. &Bj<£-c«fc k> . ftmxmic&cT . d [o] *\ 0 3 <oM^mm 

<OX7-v7S 1 3 <D«lJItf £«<*n3. fcfc'U ft M 15 ffi »C «fc o T , d [0] <D<fi*# 
i&SiSg-CiSTcif-g (0V*t£, Do ~-l)tf&gfc*SJ§£lC, *<DiJ»7ctf-8lc*5(,>T 
ffijctf^ft L v> fc tf> lc , d [0] omzXibZ £ t iff* it it ^CftSJ^ifc* 20 

ifflt5Cilif2ft^ t LfctfoT^ iS»7cttKE*S-T S^liJ^^fcfe^r tt, d [1] 
, d [2] -d [k-l] fr£d [0] fc^fc-SlcSfcoT, ^Sftji$7C^#ffi-r S frif 
5A^fi'yHT, #&Lfcttntf, t?-|iaa*i£S*T, d [1] , d [2] 
•d [k-l] (©^SBXti-SC) **46K-r<k b tc LTt «t^ 0 tiL&VftMfim 

[ 0 0 8 4 ] 

test, aitt, #mm&!&m®tR s Am%&mtft#mbT^z#i&wi<Dmi8.z z 

£ 5 C t BJ8iT'£S 0 04tC. C <D lg £ © Bg *i j[l S X AOWUeil^Sto 04 30 

t^jnsj;?!^ *^§Jn->xf 01 ©n^a^ff « i i o tm&vnmmn 

tf «a 3 1 0k> 01<Dft2PJi{£f£g@l 20(OfflsKgIiRSAl«ail 3 0 <0«Stfg 
5 R S Ag£SSB3 (t**ft|*ttgttin) 3 3 0 *i^n>3. 4*. 04© 
«U80!l<Dttfta. S*ttfcli, 0 1 attttffl fc n $T $ 5 „ 
[ 0 0 8 5 ] 

tu#<D0 l <D«|$0iJ<Di§£fc(i, MAtf, ttKfTMtfM*MilffM 1 l 0Rtf#Sija£# 
SB 1 2 0 &f«ffl#tf IBUfcf I Crt-Kfciffr5fc*RSAg£gfIl 3 0 J& fij 

%fT« i i o&^^sija^^sfia i 2 oicfco, smjb^icjs u^saa* r s as* 
i 3 o cn^tms^ogisiciSJStsftifLTinrs. 

[ 0 0 8 6 ] 

ttfssstis. ¥H^ic-rsi§^s m<ommit. m%n m^n-o rs5 . ^assic-rs 

3o*gi#?fcaf8fT<&!]'\«LT#Ma£js&fai 2 oictoa^t i am sea 

<om%)h,Hm) zft^mmm*. RSAi^gn so^Ma^ritSdi 2ot« 

WZ*y b<y-irZftLTmtit*imicLTm<D%.%. (*r * 5J- «5 ffi a © S * * 
froTSt5;£ffifc£!F&5. *^7-n/ft5i^, RSAff£&BBl3 0i:#fija 

£/#$sem 2 0 t<oifflT?<D-f>t) rot? »cii, ®M.*v8mt%iiz<D&ffi*m%*z<D&m* t 50 
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[ 0 0 8 7 ] 

cvmmBmom-stit, n®m%n& 1 1 o K.vftmm%.f£&® 1 2 0 £-f*{t 

[ 0 0 8 8 ] 

&#©e 4 <z> #} fig w M*tf, «aff«*w««»ff«2 1 

icJS^/SrWffiSIStf^BaSl^rR S Ag«gE2 2 0 fc:®Sf tt fiJ J8 # tt Mff <RI 6 

M&fB&Rtf £M8!*©£&£n;fc R S ASS8i2 2 0*JR$L, ikRSAS*8fl2 10 

2 o cn%H-w«*©*B»ctta**ft £ lt«j8t*. a*, hi ©mm*. m*« 

[ 0 0 8 9 ] 

COHttt, i^>f»;>Xffl, £Ma*«fc *§-«©«* 8©#fiJ;£i£ft H*. M 

;tj£g£3i$©«as#ft h> ±iso*aso*jra»j««fc o t*«>«ffljbn>#fflsic (ns 

[ 0 0 9 0 ] 

4*. h i *b 4 tttmts;&mf&m*>Bii&-vii>Zo Mx.tr, Bitter, a»^«sci 

2 2 * R S Al^gi 1 3 Ofllfc fit AS 15111"*** 3, 20 

[ 0 0 9 1 ] 

|!J73ffi^^fJ«©a<0<SfflIiIIi^ftif©^l>JffltcB8^'r5S^©'>ft<fcfe-gp*HrSi:L 

t\ ys-asftto-ric. »»j»*««»ffl^T»3i*-r**5 te UTfe*v^. erne* 

[ 0 0 9 2 ] 

Uftl»>J§-&£tt, 0 2 ©#W»M*J**«fcO^Ttt, Xt^S2, 
S 344*, Xf^S4Tt [0] %*fe5|i»!&t?, Xf 5fjf5-ld u 

[u] ta^yf^nt ti] *nj*-ra»»**<*iE*-rntf*v^ *fc. «3o 30 
RSAS^^mti, 0 5 ©<t a tc&iE-rnif <fc<^ 6 

[ 0 0 9 3 ] 

ft*, y3-I**IBt8*fflUft^**, Brfc©*^ 5 <M*tf, SB) , S« 

[ 0 0 9 4 ] 

ft ft. *lc^5-«*«fflLft^«*t'T«»*k:tt, H 1 ¥H 4 ©aR£j**fcoi,*T 
tt, ^5-a*<ktfa-<>x-y * X*£j8?3tt*ttf*Bfcft 0 , ^-©fHftSas' 
*«#iTST-*f2t&3l$ (0) tt, *ftUtt>b<*Sfc:fta 0 
[ 0 0 9 5 ] 

(IS 2 (DsfcSSM) 40 
[ 0 0 9 6 ] 

£ 1 <0^fifi^J8T*tt, M " d mod n <Oft K Ic * t> T » d Jc # SJWffi i8 © ¥ * SS ffl 
Lfctf, *§»JfiS0JliT'tt, M * d mod n <D ft W K * B A M 5& M * ttffi f 5 « © 
Sp = Mp"dp mod pfeitf S q = Mq * d q mod qkr&ttSdpfcdq 

^T«g|J^tt, S*Wlcti, £ l ©M«tt£HiftTS« (8 l ©$ft$ft©K«M©M 
Wt>» ***»ttteo^TH«lteaT***) . so 
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[ 0 0 9 7 ] 
[ 0 0 9 8 ] 

@6 ic*«n*j:it. *«9»as>x?i»i*, Hsuai5ifT«i3 i o, #s«a£tfgia3 

20, RSAl«SB 3 3 0 «flitt^S. £fc, #&a£«£fi2320tt« RSAtC 
i»3 2 1, SL»£$8& 3 2 2 , ttfRJ§t£fi)ca&32 3S:#tr. RSAg£8Ef 330 ti, 
^S«jaiB«SP3 3 1 . ^*«»J^9t»gP 3 3 2 , Hi (Ox-* 12®$ (KT, f*-*12* 
SP ( 0 ) t Bat 5) 3 3 3, » 2 <Or-^l2ig6l5 (ttT, ( 1 ) fcEJB* 10 

5) 3 3 4 , 3 3 5 % C R T ^f£« 3 3 6 , ffl ~h % 3 3 7 * fT tf . 

[ 0 0 9 9 ] 

fl-S&a?§tT«a3 1 0 li, RSAOi'lHl ( e , n ) , IBffiSi (d, dp. dq. p. q) 
dm£ASB 3 2 0 AORSAMC««3 2 ltcftttti. fc£L, p. q 
ttf nf n***I»-e, n = p* q, e d = = 1 (mod Jcm(p-l) (q 
- 1 ) ) £ g§ L , d p = d mod (p-l),dq = d mod ( q - 1 ) 7 & 

5o 

[01 00] 

#fJ8!£ricgiH 3 2 0 tt, d p teftr&#W8aa&tf d q left-** S£MfBtta«*£ig 
LTRSAI«SI3 3 0 1C««SL, R S Af£S@3 3 Oti, ft * ft 5> ^fJ«J 20 

«M*J8^T*BA*fsfc*Jl*«fli LTMMte»-r*»*S:M " d mod n** 

[0101] 

*f, #llit*8B 3 2 0 t'9k»T«flt*. 
[0102] 

R S A 8112 ttfiK 3 2 I tt , ft Mafia 3 10a>€>{K*&£ft*RSA©&B8a(e. n ) 
(d, dp. dq. p. q)*«»L»<&*fclfil;r»ll«ftJ«»324fc4iM 
a ( e . n ) tffiffiSI (d. dp. dq. p, q ) *{K&t£. 
[0 1 0 3] 

a»£fi)tsis3 2 2 ffs©tr * hgciifeitf tr * h w*fiE«©*«tta»ic * o 4* 30 

u *fte>*#sij8i£jass3 2 3 eft*? 

[0104] 

#S«ja3ij£8&3 2 3 tt, gL»£/#3B3 2 2 fr6ltttj n«Sp iOdfllttOilSSd 
fcttq ±©#3J«5&a©«}f£jS#i: , R S A 8112 i8 SB 3 2 1 *» ft 5 «5 ffifil (d . 

dp. dq. p. q) % &aa (e. n) ^ Ttt p ±<D » W««a i: 8 q ±©£ W» 

[0105] 

[0 1 0 6] 

B7t, CO|«Ofll¥MO-Mt^r, 40 
[0107] 

ccfti, »a«*a**©-Wi: tr. »{g«d p*ftj£©auc «tt> k p mic#mL. 

Mid q**ffi©*lc<t0k q Mt^SiIt5t©i:-rs o t*fc^, 
dp = dp [0] *dp [1] * - * d p [kp-1] mod (p-1). 
dq = dq [0] * d q [1] * ••• * d q [ k , - 1 ] mod (q-1) 
t S <fc -5 , dpfcdp [0] . • . dp [k p -l] IcftML. d q * d q to] . 
-. d q [ k „ - 1 ] left®? 5. ft*. KTTtt, k p = k q = k t L TlWt So 
[0108] 

*-f, a»*/«gP322 i±, str-yj>oaa«rkp-i = k- iffl4figt, **nFn, # 
aa&a d p [i] ~d P [ k - i : ^f^Ats (xf^s2 i > . s a, mm so 
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ad ©tf-y hg«fc 9<h£ v>t£ hft (ffiffiSId A<0lJ;L«f 5 1 2 t£ -y hfcSlMi 1 0 2 4 £ 

•v h mm<D®sicft$iw®& d P en ~d P [k-n A^n^neij^jf 8 tr -y \-m& 

t 0 1 0 9 3 

a»£^si5322 i±, s e-y k , - i = k - i ffls«u> ^-ft^tu # 

Sfl8««d q [l] ~dq [ k - 1 3 ^ftATS (Xf ^7S22) , 
[01 10] 

a#£j£6B 3 2 2 tt. (kp-1) + (k q -l) = 2 (k-1) £ -y hfiTlO 
A;y^l*Sk p -l = k- itt5l^>f";nt [1] (2£i£2k-l) 
v^A (*r -y 2 3 ) o 

[0111] 

*^t». »««4*»323i4, t [n = itftsa (os^ ttmmmmd p t j ] 

( 1 < J £ k - 1 ) ) fc&tt^fctfT, 
Dp = dp [1] *dp [2] *-*dp [k-1] 
tL, R S A8t8ettS&3 2 lfr6«tt*ft<58««dp*fl|^T, 
dp [0] = dp*Dp"-l mod (p-1) 

ttZCtT'. i£p±©SS0 1 •OCO^fJffiffiad p [0] (Xr>y yS24) . 

[01 12] 

|3J*»lcbt\#SiJ8!4M32 3 ti. t [1] = 0i:fc.5ia(O3;tK#3iJ«5®8!dq [ 

J] (lSj^k-1) ) *8H:f£*>#t\ 

Dq = dq [l] *dq [2] * ••■ * d q [k-1] 

RSAl£ ©35 3 2 1 e>m*&£ft*ffifgSI d q *fiH>T\ 
d q [0] = d q *D q " - I mod (q-1) 

ttSCtt, & q±0a0!O0#lUI6«ftdq [0] (Xf '^S 2 4) . 

*fc, t [0] =1, t [1] = 0i:t8 (Xf 75*S 24) , fOlfc, t [0 

] = 0 , t [ 1 ] = 1 t LTfc £lr'. 
[01 13] 

ffi p ±«#3¥ia«i&d p [J] (0gjSk-l), 
i£q _h<Z>#9j#®Sd q [u] (0iuSk-l), 

i-fyf»nt [i] ( o g i < 2 k - i ) 

[01 14] 

^ LT, ^UJilSfigaiS 3 2 3 «, 
dp [J] (0 £ j £ k - 1 ) , 
dq[u] ( 0 £ u £ k - 1 ) . 
t [1] ( 0 £ i < 2 k - 1 ) , 
amm ( e , n ) , 
8ffi8 (d. dp. dq. p. q) 

*R S Af«8B3 3 Csffl^tJ (Xf »^S2S) . 
[01 15] 

fc*5. 0 7 ©Mlcfc^Tti* dp [1] . dp [2] . dp [k-1] £±T£fi)c 
Lfc&lcdp [0] «#«>5&gtf £ 9 , dq [1] . dq [2] , ••• . dq [k-1] 

1 1i&lC d q [0] %##>.5&gtf 63 , ftlKrtli, 8; p ± © k ffl<D #2PJ 
ttftft £& q ±<Ok1@<D»SiJ«5mMi:8l^>r-yfX*ifcD<fc3ftJSST?«46Tt,«9t)* 

[01 16] 

#IC, R S Ai€8IH3 3 Ot'Q^TlWtS, 
[01 17] 

#MBEttaS3 3 1 tt. #*ftt£j8ttB3 2 0 ft ©#3>J©£l£g(S 3 2 3 5 2 ft S i£ 
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p ±v>#*umm* m q ±<D$mmmm* si-fvfvn, ^mm u. n) , mmm ( 
d, dp. dq, p. q ) zunL. &gtcjs c-cztxztiz^zmmteftm® 3 3 2 ic 

[01 18] 

r-f ggssp (0) 3 3 3tca> ffiq±©kffl<o#iimiea*tefflLfc'<tH!a&atB<D 
if® Kg* s q #««**u f'-^ge^as ( 1 ) 3 3 4 ta, apio k m<o#mumm* 
&mLn<i*mm&mw<Dwnm» s P tfte«*ns 0 s P a, sitttic. m p " 

dp mod p*4^> Sqtt, fi^WC^ Mq'dq mod qS^xSCtKft 
StiiOtSS, CCT, Mp=M modp,Mq=M mod q?$S, 
[01 19] 

¥£tt£JS53 3 5li,»git&S¥:i:M*fci:li:. Mp = M mod p*5J:tfMq=M 
mod q*£j*L, T-frSBffiffli (O) 3 3 3 ©filfflli: ITM q 4«JSt2 i: fc t 
fc, -r-*32tggB (1) 3 3 4 (OVimmt LTM p 4«^t5„ 
[0120] 

«M*ttw*3 3 2 a, ^iiiaiHtasi533 i)!)>e.m«&^nsai'>7 t 7^xfiSt [ i 

] tfl fcStf, x-^EiSSC ( 1 ) 3 3 4 frt> S0@$-C©H-»te* S p (tzKL. to El a 
WmfifiS p=M mod ptft^fc^tfthLT, }£ p d p [ J ] 

otSp = Sp"dp [J] mod p«ft8*fHv*<Dlf3&Sp£-r-:*i2teSfl( 
1) 334lc«iWf3o flS^, 8^>x-y*Xffit [|] #046tfx 7 s - * IBteSB ( 0 
) 333 ^e>MlHlSl?<OH-J?^*Sq (fcfcL, M@(ijSHlIS q = M mod qt4 
3) £R?tfaiLT, }£ q ±©#3ljfg®ia d q [u] *figoTSq = Sq~dq [u] m 
od qVftWZfi^s ZVmSkS q % 7 s - 2 IBM ( 0 ) 3 3 3tC«iWrSc 
[0121] 

fc*5, CdTti, IOf'y)X|t [ i ] « 1 ogftlc^ &p±0#ffiiBfKMit:j:S'<c 
£JKM$tfg«ff 31 -f > v* -y ? X it t [1] = 0<Di%£\c, i£ q ± <D 3« #> M <fc 
5-<*ai*J*ff®*ff o <fc ? LT^SAK CftlcRg^Sft-SfcOD-etifc < , M ^ if . SI 
^>f'^XIt [l] = O <0«^lc, m p ±<0»9ja5fBSHc J: 3 ^*St#J&H-J?*?r^ 
« a-f^f^Xit [i] = !<Di§£lc,ffiq±<D#8iJ85ffia^c«fc*<S3ltM&af-}?* 

[0122] 

CRT**»3 3 6li, T-^iBtggP (0) 333©S^««Sqi:T-^l2«gP(l) 
3 3 4<0a8MlSpt*S = { S p * q * ( q ~ - 1 mod p) + Sq*p* (p 
"-1 mod q) } mod n ft £ 54® T? L , -ft * S ( = M " d mod 
n) £tfj£3S3 3 7 K«£^£o 
[0123] 

tt4ltt337&,Sit««ttJRfcLTS( = M~d mod n ) fctilftf *. 
[0124] 

WT, *BAM&£9«ttfflr S«ft0>&«ffBftft«flJi,';fc R S At *¥HHlO^TKI! 

[0125] 
[0126] 

ctuii, p m<D%mw&m d p [j] a, j «ffi©/hsi,>/jfre>j£&<jgfflL, 

& q SI © # #J 85 !B Si d q [u] U . u © fig O 'J* * ^ ?3 5 f £ t <0 L tc 0>J Z if* 

[0127] 

Stole, x-^IBM (0) 3 3 3 fc<fctf T-* IBM ( 1 ) 3 3 4 \C * t\ €*l to #J<B t 
LTf i^||Sii3 3 SA^i^SnSMq&tfMp^fflSii^, * , i=0, J=0, 
u = 0i:t5 (Xt7 7"S3 1) , 
[0128] 
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WBtt, k p + k , = 2 k [a] ©8 9 jgLfcatfc*. 
[0 1 2 9] 

Sf, ^£SISj5fc8tl?8B 3 3 2 tt. 18^ >f» * Xffl t [ i ] *#»U, t [ i ] = 1 * 
6tf (Xt'^S32) , T-^iatSfflS (1) 3 3 4)b^S p*S*fflL, i6 p ±©#W 
d p [j] «ffi^T, Sp=Sp" dp [J] mod p ©«■ Wfcfflr^ *©£ 
&Sp*f-*f2tagB(l) 3 3 4 tft«L (Xt^S33) , J <k tf 1 * * n -ftl 
1 y*V*>h?Z (Xt 7 S 3 4 , S37) o 

[0130] 

ag-rvr-v^xfflt [i] toasts (xt^s32) , x-^msu (0)3 

3 3 6 S q *K*ffl U & q ±©#MfBttft d q tu] £ $ o T , S q = S q " d q [ 10 
u] mod q ©ttW*1?l,v *©«* S q ( 0 ) 3 3 3tett»L (X 

f-yrs35) , u^<fetfi*^n^ r ni-ro-f'>'^u^>h-r5 (xt»?s36, s 

3 7). 
[0131] 

±12© 2 £lft©-3 >r -y * X<S t [ i ] ICfSCfctt-f nfrtffrtotifc&fc:. i© 

ffl*#»L, i ©lltftt p±©#l»f&ffi8!i:8; q -t©#9Jffiffi«©l£» 2 kti*n»ft 

(Xf^S38) . Xf'^S 3 21:19, © ;U - 7 © i&a * f? ? . 
[0 1 3 2] 

X-f » y S 3 8 Icfct^T . 1 > 2 k fcftofc&Sff , Jaa^-^^rtS^T, C 
R T 3 3 6 lc * 0 , r-*ie«SB (0) 333©©*?8£Sqi:-r-*!2tea5 (1 20 

) 3 3 4 C®iK^»S pt4S = fSp*q* (q"-l mod p) + S q * p * ( 
p"-l mod q) } mod n fc 5 L T . ¥ * M IC ft* 3 S * * S = 
M"d mod n**»5 (^f77*S39) , 
[0 1 3 3] 

«±©± 5 KM* ft 5 C t?, * HA5S'J&S£a*ffifl!TSt&-&lc i£ p ±©#3W«5?B 
®Jc«t5^*«W^Itl[i:j*q ±©ft3mffiaic<fcS^?mS!l£ffg£*7>ifAfcJi# 

[0134] 

Bfr*>, tz£Z.ftmW&®<D-&X<D®ffftfrvrc£ LTt, p ± © # fRJ fg ffi SI t j£ q ± 30 

©#Mffiat©E#jtf if^snfcttftff > asmaid pfe^t/d q^^^-rsct^-p* 
k q*^s P ±©#s«m«ai©ra» k P *iit/fflf ***<tKi?, n-isa 

fflffllt-r 5 C i:^"P*5o cn*t?3ttWtft«}«fla|T'«, S8©^S"J» k p k 
[0135] 

4>iAII^SI««l t T, SSmStdp. d q % 6 4 M (lEflMf^i i: k 
p=kq = k = 32) Ic^SlJ t fct§£«, ft 2 © 6 0 HI ©8 © £fc ■£ * # « LUlftl 

tf, ffiffiati^* p>ft^c i: lefts, $fc> iimcin^T, -5 <fc ? Ic , 0tj^{fa© 

##J#i*lcM-r.S1ft$fciffcargfc-f *©1flfat>&gi:&-3T < 5fci&, IBM© 40 

[0136] 

WTTfttx *Slfifim/!8©^»eiJlco^TittW-r 
[0137] 

±35Tti, £ P ±©#3iJ85?g8!dp [j] tt, j©ffl©/jN*t,^jb^S^ffifflb, »q± 
©#9J«5?g8td q [u] li, u ©ffi©/h2^*ffr£i£#{sgffl-rst>©i: Lfctf. t» % 5 A, 
. C tie. £ ligfc Sf®#T8!*llffl LTl^t t> <t^ 0 
[0 1 3 8] 

sits ±ae-e«, i£p±©#si]*gmffld P [j] ©ffifflm**j<i;t;j* q ±©^sijsjms! d 

q [u] 0feffiJ®#li@£<Ofe©?&ofc*^ &p±©#8j$®8l©teffim#£&q±© 50 
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ftmm®m<o®mm!¥<D-jiiXitmj3it. m^©*^ 5 (.mam. mm) , ^y? 

[0 1 3 9] 

* fc, ±£?tt, ffiffiS d p d q ©ftlPJft k p ^ k q «H£T*S-d rt: , k p i: 

[0140] 

±13 714, $«B»d p^d q<D%MX&tLT, mm O H <T> © * ffiffi L tf, flfi 
©#8"J#ffi, 0»J*tf, ftm©#<0#SiJ#i!£, Mi£<D#<D#8iJ£8;, R*j£©*©#fiJ;fii£fc 10 

BTfiiTfctK jhjs • ais • • i$?£®&3ft*§£tf t^ii-eas. 

[0141] 

Sfc, ±l2Tti, WffiSd p-S> d q <DftWfimitftm<Ot><OlC®1g.2 txX^IZtiK mm 
, (»5^t±a--ff) 45Sc85?B8©#$iI2ffc£g*.5 (IpI-OS® ( 3 l> ti ;i - +f 

[0142] 

«5?&8td p fcffitBiBd q i: T , ffiffi^O^SJ^ffi^^l-fcLTfeJcV^L, gft3#S 20 
[0143] 

£[<D-m-e3or>tzbK ftP\m<£l&&Wt R S A & € £ fi3 - ft {t L T lr> 5 - ft Si * 

^ns<fc9ic, *ni^iaai/x-rA{i, 0 6 ©ttSB&sifT® 3 1 0 t isuaoflg&aisfT® 

4 1 Of:, 06£D^fjg<fefiKgfiB3 2 0(D^.*g^i:R SA|«||S3 3 0<*>$fi!cgiit* 
Stt^R S Af C^tSIW^H-JSgE) 4 2 0 *lin>5. ftfc, 0 9 <D$l£ 

m<om&it. s*wictt, 0 6 om&mk. r«it««. H6^B9o«jsfficHtsfgiii 

[0144] 

Sfc» ft*, 0 6 *0 9 fcligft*«S/S0iJfcBJ/i?&.5. M&tf, H 6 te * i> T » Sl&£ 
fiESP 3 2 2 *R S AS*»I03 3 0 ffllC 09 * 3 ffltf Bf HIT S . 
[0145] 

Ctt*T*0 6 *B 9 *#M Lft #6 BJtW LT * fcWtfflJtefe^T, S^lcSIl 

IB©* 3 ic, P ±©»S"j«nBa, i£q ±©#8ija$aifcinfii/u? 

Mfcf 5 a $ ic lt t> * ^, 

[0146] 

LftV>»^tett, 06©R S A&£8ia3 3 0?B94>R S Ag*8fii4 40 

2ot*^t, f*-*e«« (o) tszxfT-fmmM en icins.T, ^s-ai*<sg/8 
or-^iaiasp («t, -r-* tats a* (2) fcgB&ra) sicgstt*, 06<orsa 

3 30 1CtJ^T*6{C7 r -5'l2effl! (2) 3 3 8*&t*fc«;p*Bl OJC^-T. 
[0147] 

ft*, l-fyf-^Xt [i] ©ftfc ?> lc , 2tr-yHJifii[<08l^>f ; 7^Xt t [ i ] * 

gijxif , t t [ i ] ="oi" <£>it£ictt, a p ±o^s»jfflffiaic <fcs^$ai«^ 

H-ftQMtfrt*, tt [ i ] = " o o " ©ii&lctf:, fcq ±<D#|i|flSSB8l;: £ £^£Jit 
mftttUOtamZVi^, t t [ l ] = " l 0 M o r " 1 I - Oi§£»c«, ^S-«IlJ;| 

'<%%m£ftw<D® ! m*VTo mictz* ft*, m-of-y *x t [ i ] ^h©* 3 50 
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[O 1 4 8] 

*"*-ra£figfflir SH&lctt, H7 ffl#««ttM<fert#«teo^Ttt, X^-j/^S 
25«6i!©aS&^;yyKxI®^5-i(lu [u] (O^u^x-1) iiJlttS 
X-? >y 7*a8ttSo Sfc, -;yS23Tli, (kp+kq+x-2) *2tr-yhg-? 
Io J:32<Offll«Ji-&fca "0 1 " 4S2e>y h%kp - ll^ftfioiECMoS^tti 

" 0 0 " 2 £ k q - 1 *X t t [I] (2SlSkp+k 

q + x-1) fc^^AKSfig-rs. Xf^S24T(i, t t [0] = "0 1" 

, t t [ 1 ] = " 0 0 " fcf Sfr, JfcS^tt, -f-Offit , t t [ 0 ] ="00", t t [ 10 
1 ] = "01" fctS. 

[0149] 

08CRS Ai«flli> 01 1 <D <fc 5 IC&IE-rtttf <fc^. 01 1 tt, 0 8 ©#1® 
i:Jt&LT, S^Vf'yUt [ I ] <0ffl[ ( 2 fcT -y h) 3&ffilc#l£fSo t4fc^ 
, ^5-8K«fcS^t^*J&fi-3?<Q?&8£tfJ!nJ;t P.nt^So fcfc, Xf'^S40Tli < 
tt [i] = " 1 0 " © i: * £ S ' = S p " d u [u] mod p £ fr <^ , tt [i] 
= "11" ©t*ICS' = Sq " d u [u] mod q %ff 5 i 5 IT^5*«, t t 
[i] <D<ftlCfrfrfc&-f»c x S* = Sp"du [u] mod pgfcttS' = S q * d 
u [u] mod q <D-#©#«:7? •? J: 9 K L T fc <fc ^ t , S' =Sp"du [u] 
mod pSftliS' =Sq*du [u] mod q & ft OfflS * f? 5 ffl/S t» VI fig T? & 20 

So 

[0150] 

**S-8£«ffi-f Sfr^ffl Lfc^frfc, Br^0^^5>yt (0!Utt\ 410) , M 
[01 51] 

fcisfci-sf-* ceas (2) tt, *n £f**<*gic as, 

[01 52] 
[0153] 

s a ©ffl^^ig-a-ico^r t isiaiicHr^T'*3. coit^ictt, c n$-c-$$ lts*: r 

5 AI«8H2<)H(0$$R S A8(f8Bt*3. AftfcBf " e mod n 
i:-Ttltt<fc<, ffljjfcltttTXM (= (M'e 

mod n)"d mod n ) # t# 5> ft S » 
[0154] 

&M8R§*f 73 5£<D-0»Jfc LT R S A © ^ <D i§ £ £ 0>J IC t Z 81W 
LiibK *8BJjtt, ^©ft&©^BBS!a§#?3« (*8R[&8lBS*i, D HfflftS, E 1 G a m a 40 
1 B|i?S?) ic 

[0155] 

a*, *nmmm<D&4 ©asiBtt, />— f ^ 1 7 i l t t v 7 F^iTi LTH^Riti*? 

6 S ft 

[01 56] 

*£«fiM<D&4<D£Ett, 3> ea-*lcm£<D^K£3SfT<*-<*5fc«><D (&S 
(,^tt3>ei-?«rm^©¥Si:Ur«afi6*-a:Sfc46©, fe5tui3>i; a -^ic3r£<?) 

fc3>£i-*MlR0^flBfcfe»«fcfcLTSt8fi*SCi:fc-e*S o 

[0157] 50 
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m<D%mtLTt>. nffiBifig-e&5o £ft. w*.tf , *i«iMis©£ia* i c^-k?h 

[0158] 
[0 1 5 9] 

fc*S, C ©^©^©MTM* bft#}fi)cH:-0y-?fco *ntt^O«)ill4»i»tS 
®g©fc©-?ttfc < , 0J*Lft®fiK©-8IS*ffi©fc©-Cli£&*ft 0, PJ^LftttfiX©- 
3|5*&^ft<K 09^Lft«l«lC»J©«(i*S<,>ttS*i&^||O Lit *) , io 

ft <o -rsc i:*^ic<fc-3T?#5n5Sfj<o«jfigtBrfiiT'fe5o *ft, t ft®fig ttastt 
B8&ttattic«iiE&8ij©«ij£&£ & *imx-&z a *ft, ff!i*Lftfflfi8fci*i-*> u< as 

IKca««I)St5giJ«fil)S, Lftfllfi&t & L <&«&©$* *£^SS'J©$fi8 

*ft, c©£«©$*©£ttu. fflg'jSEi: ltcjiw, BBa*»o2a±oanico^ 

T©f8W. ->X-r LT©f8W, iBSUSIBrt ffl5 © $ file 8B # O n T ©58 BJJ . $ ft li 

*n£lc*f£T3#i£<D?giy!3K f!IU©Si;5> ©Pt> tt& $ ft ti * r =f U »c & 5 £BJ! «r 3 20 

ft^T. ^^©^©^icflfl^LftrtSfrSli, 0J*Lft#|fi£l<:IS££n*<: i: * 
<8W;fc}iliaj-f.5<:i:tfT?£3*>©?«S e 
[0 1 6 0] 

*&Wlt. ±^LftH«S©^HSlcfB«?n5 *>©Tl±fc < , e^SffiWUSfflfcfe^Tffl^ 

[0161] 
[^B^©^«] 

i?« 30 

[0 1] *5glfl©Il ©flMJ&/&»c&5B§^©SS/Xr A©ffifiK0J**-r0 
[0 2] H**JB*fcffi 7 D-**- h 

[0 3] l3&j&M»C$.5#SlJ«5ffia*fl§^ft R S AS«?JSd!)-«l|*ft7D-f + - 

1> 

[0 5] |S|^fifi^^»«:fiSS^SlJ«J«a*ffl(,>ft R S Af%fi©ffi(DfPJ«^t7D-f + 

- h 

[07] |H|^i66m^lc«S^Sija5?Ba4fiK#l®©-0!l*,Tx-r7D-^ + - h 40 
[0 8] H£flt&IB<<:ffi£#S!|fBftM«JIt'fc R S A«*f«0-«tSt7D-ft- 

[0 9]PI^JS^fi§tc#SB|^Saaii/X-rA©fl!l©«|fiKM*^r0 

[01 o] i^sifigjg/isic^sBif^jasi/xxA©* ?> t fls<o«jfi)cgij*^-r a 

[011] mnm&micmzftmmmmttm^rz r s As^^M©ffi©«u*^-r 7a-f 

[012] square-mu ! t iply me t h o d Offllf 14it7D-? + 

- h 
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1 2 0. 3 2 0 -#»ft£j£ttlB 

1 3 0. 2 2 0, 3 3 0. 4 2 0 ••• R S A i€illB 

121. 221. 321. 4 2 1 - R S AM£13ffi 

122. 222. 322. 4 2 2 - §,& £j£gf 

123. 223. 323. 4 2 3 •■ KM ®. 88 
1 3 1, 224, 331, 424 •• jffl IE 18 SB 

1 3 2. 2 2 5. 3 3 2, 4 2 5 ••• ^ t St $"J & U" 3 $ 

133. 134. 226. 227, 333, 334. 338, 426. 4 2 7 - 7*-* IB 

135, 228, 337, 430 "Hi #88 10 

335. 428 -¥£#Sljail 

336. 429 - CRT £fiScS8 
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220RSA*ft||ff 
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[0 6] 
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S-8*dafmodn — S13 




310 



| jjggggi 



321 
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RSAft 
ISttff 
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— S24 
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RSAfl 
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-J mSe i 

425 H ^gjflWM | 

/^S3 ^SB9 
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Sq*p'(P*'imodq)tmodn) 
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S101 



l»1.l-k-1 



02 



z-z* 2 mod n 



S103 




z*z*xmodn -^3104 



—8105 



StC8 




i<0? 



(29) 



JP 2004-4341 A 2004.1.8 



(74>ftSA 100070437 

az)mm nm m- 

mtimmtwswms&tiim m&w£mm&*iyz-fo 
(inmm m w 

F*-A(##) 5J104 AA22 EA28 JA23 SA02 NA18 



